Category: Terraform

https://media.datacumulus.com/aws-sap/AWS%20Certified%20Solutions%20Architect%20Professional%20Slides%20v3.1.1.pdf 1) CloudTrail 1.1) AWS CloudTrail • Provides governance, compliance and audit for your AWS Account• CloudTrail is enabled by default!• Get a history of events / API calls made within your AWS Account by:• Console• SDK• CLI• AWS Services• Can put logs from CloudTrail into CloudWatch Logs or S3• A trail can be applied…

Read More “[AWS] Solutions Architect Professional: Lesson 2 – Security” »

Đầu tiên chúng ta follow theo documents: EKS Best Practices. Hoặc dụng toolhttps://github.com/aws-samples/hardeneks

Mình đã viết nhiều bài về việc tạo PVC trên eks hay k8s 1) Install CSI Driver SMB Vậy nếu trong cluster k8s của bạn có cả linux và windows node thì phải làm sao?vâng chúng đó có 1 giải pháp đó là CSI Driver SMB https://github.com/kubernetes-csi/csi-driver-smbhttps://www.phillipsj.net/posts/how-to-use-the-windows-csi-proxy-and-csi-smb-driver-for-kubernetes/ Đầu tiên bạn cần cài đặt CSI Driver…

Read More “[csi-driver-smb] Providing PVC with type ReadWriteMany base on SMB” »

Just make sure cluster-autoscaler has permission to use the resource csidrivers you can edit the clusterrole – RBAC and add the access for storage.k8s.io Edit cluster role with this

Nếu bạn đã cấu hình pvc dựa trên efs và eksnhưng bạn thấy các pod của bạn không không mount được vào pvc Lỗi như dưới dây https://github.com/kubernetes-sigs/aws-efs-csi-driver/issues/637#issuecomment-1049355766 Bạn cần kiểm tra Security Group đã allow cho subnet của EKS access vào đó chưa?

1) Introduce Why do we need to use EFS CSI Driver in EKS Cluster? AWS EFS Container Storage Interface (CSI) driver allows EKS clusters to manage the lifecycle of EFS File System in Kubernetes Needs big size Node Group for EFS CSI Controller to run 2) Install EKS cluster Bạn sẽ cần tạo EKS cluster…

Read More “[AWS/EKS] EFS CSI Driver – Create Persistent Volume Clain with ReadWriteMany type on EKS” »

https://media.datacumulus.com/aws-sap/AWS%20Certified%20Solutions%20Architect%20Professional%20Slides%20v3.1.1.pdf 1) IAM 1.1) What should you know by now Users: long-term credentialsGroupsRoles: short-term credentials, uses STS – EC2 Instance Roles: uses the EC2 metadata service. One role at a time per instance – Service Roles: API Gateway, CodeDeploy, etc… – Cross Account rolesPolicies – AWS Managed – Customer Manage – Inline PoliciesResource Based Policies…

Read More “[AWS] Solutions Architect Professional: Lesson 1 – Identity & Federation” »

Learn how to create cross-region replication between elasticache redis clusters –https://aws.amazon.com/elasticache/redis/global-datastore/

You can use the describe-fast-launch-images command in the AWS CLI, or the Get-EC2FastLaunchImage Tools for Windows PowerShell cmdlet to get details for Windows AMIs that have faster launching enabled.